Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/4rqR2SThD7Tbr3Myq6cRU-NMWoY.roa
File: 4rqR2SThD7Tbr3Myq6cRU-NMWoY.roa (raw, json)
Hash identifier: 8oWNCj4o29FB8vRfxX1Vq12BermUI6Rq4mU/C5H8qJA=
Subject key identifier: E2:BA:91:D9:24:E1:0F:B4:DB:AF:73:32:AB:A7:11:53:E3:4C:5A:86
Certificate issuer: /CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Certificate serial: 01856CAEF0347AD0D772400A775101F7ED5A
Authority key identifier: 71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/4rqR2SThD7Tbr3Myq6cRU-NMWoY.roa
Signing time: Sun 01 Jan 2023 09:34:42 +0000
ROA not before: Sun 01 Jan 2023 09:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48715
IP address blocks: 185.173.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f0:34:7a:d0:d7:72:40:0a:77:51:01:f7:ed:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Validity
Not Before: Jan 1 09:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2ba91d924e10fb4dbaf7332aba71153e34c5a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:f9:0e:de:f1:c9:c7:d3:7c:97:3e:c5:27:
7b:92:63:27:55:77:6a:5c:cb:36:be:00:07:c8:3a:
2c:02:b6:8d:07:d9:b6:07:91:3d:a9:4e:cf:da:5a:
25:50:09:84:3e:2e:8f:70:84:f6:b8:ed:65:81:5b:
5f:07:3e:50:00:f0:93:e6:fc:d1:dd:7f:35:28:9c:
7b:5e:59:50:17:1e:92:89:11:75:df:4d:c7:1f:ae:
5f:dd:92:28:4a:63:7e:0e:17:9b:80:de:f4:d7:4a:
bc:a6:96:39:44:89:76:96:b0:28:6a:aa:fd:4f:1d:
90:09:51:90:d6:7d:22:9b:18:19:22:f9:25:80:30:
a1:21:cd:7e:15:01:37:c5:fd:3b:22:76:5f:72:b3:
49:d8:39:6e:2c:d5:af:1a:90:20:ad:be:0f:81:e2:
cf:6b:be:de:1d:0f:ae:25:99:3c:00:20:b6:47:97:
6e:8f:00:93:00:a8:8e:14:56:7e:9a:7b:76:c4:56:
87:b4:54:52:cf:f1:f1:84:94:1c:30:1a:70:b1:bc:
6d:1b:72:c6:dc:b2:6d:1f:3b:3e:cd:00:b6:68:09:
66:48:1c:c0:25:0b:f7:a5:ce:7f:55:c7:cc:ee:ee:
f8:0c:ad:e6:72:4c:b1:a2:8a:e8:7e:d2:0f:23:43:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:91:D9:24:E1:0F:B4:DB:AF:73:32:AB:A7:11:53:E3:4C:5A:86
X509v3 Authority Key Identifier:
keyid:71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/4rqR2SThD7Tbr3Myq6cRU-NMWoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.129.0/24
Signature Algorithm: sha256WithRSAEncryption
17:07:be:de:34:0a:9d:14:05:23:1b:a4:af:89:88:31:cb:a6:
da:86:e8:dc:d1:70:61:78:8b:97:c4:0d:ef:9b:f7:52:96:5f:
d0:ba:d8:45:43:71:c2:06:51:9e:ac:86:2e:a9:4d:c8:4e:90:
30:d4:76:75:67:5d:f0:40:85:c7:6e:59:1e:c5:39:ad:ec:e2:
9b:d2:ec:ce:f8:ba:44:51:32:44:32:85:8b:26:34:3a:3a:5d:
00:87:61:ce:d3:de:a6:5f:93:0e:4f:d9:d0:ee:d9:01:b9:75:
a2:e7:03:e9:3a:bc:3e:55:9d:50:5f:9a:26:de:40:21:f1:6f:
75:06:a6:01:e2:77:9d:33:c9:20:fb:ac:51:7d:cb:50:2a:15:
8e:30:02:c8:10:c4:7f:f5:73:5b:1a:3b:8c:19:a7:86:3f:9b:
e5:d3:06:dd:6b:10:e8:97:4b:95:26:41:09:68:04:8c:ca:11:
e8:2b:fc:c3:a1:8a:f5:af:52:59:40:c1:22:d4:83:4b:1e:7d:
7d:3a:60:a1:1f:fb:72:4b:ec:2a:62:de:08:b8:c3:47:1b:ec:
f6:f2:fd:22:e1:62:20:a7:6a:b3:4a:77:8a:b7:0d:42:8b:08:
b6:a5:e6:dc:e7:6d:84:62:a5:0d:eb:dc:11:24:b9:96:63:b6:
52:a7:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:35 2025 by rpki-client